Data Protection using Microsoft Purview (DLP)
🎯 Objective
To prevent sensitive data leakage using Data Loss Prevention (DLP) policies in Microsoft 365.
🧠 What is Data Loss Prevention (DLP)?
DLP helps organizations:
- Detect sensitive information
- Prevent data leaks
- Enforce compliance policies
🛠️ Prerequisites
- Microsoft 365 Admin account
- Access to Purview Compliance Portal
🔐 Step 1: Open Microsoft Purview
- Go to: https://compliance.microsoft.com
- Open **Microsoft Purview portal
📋 Step 2: Create DLP Policy
- Navigate to: Data Loss Prevention → Policies
- Click Create Policy
📊 Step 3: Choose Template
Select template based on:
- Financial data
- Personal data (PII)
- Custom policy
🧾 Step 4: Define Sensitive Data
Examples:
✔ Credit card numbers
✔ Aadhaar / SSN
✔ Email addresses
⚙️ Step 5: Configure Rules
Define what happens when sensitive data is detected:
✔ Block email
✔ Show warning
✔ Notify admin
📍 Step 6: Choose Locations
Apply policy to:
- Exchange (Emails)
- SharePoint
- OneDrive
- Teams
🚀 Step 7: Enable Policy
- Review settings
- Turn policy ON
🧪 Step 8: Test Policy
- Send email with sensitive data
- Verify:
✔ Warning shown
✔ Action applied
💡 Real-World Scenario
Employee tries to send credit card data via email:
❌ Email blocked
✔ Admin notified
✅ Key Takeaways
✔ Prevents data leakage
✔ Ensures compliance
✔ Protects sensitive information
✔ Works across Microsoft 365
🧠 Conclusion
Microsoft Purview DLP is essential for protecting organizational data and ensuring compliance with security policies.